Secure hardware threat protection

ABSTRACT

A printed circuit (PC) card apparatus can, in an absence of external power provided to a Peripheral Component Interconnect Express (PCIe) PC card, prevent and detect unauthorized access to secure data stored on a memory device mounted on the PCIe PC card. The PCIe card includes a primary battery to supply, when external power is disconnected from the PCIe card, power to an electronic security device mounted on the PCIe card. The PC card apparatus also includes a PCIe edge connector protector enclosing electrically conductive fingers of a PCIe edge card connector. The PCIe edge connector protector includes a hidden supplemental charge storage device integrated into the PCIe edge connector protector. The PCIe edge connector protector also includes electrically conductive contacts to transfer supplemental power from the supplemental charge storage device to the electronic security device.

BACKGROUND

The present disclosure generally relates to electronic data security. Inparticular, this disclosure relates to providing enduring power to anelectronic security device configured to ensure the security of data ona memory device.

The widespread use of computers and electronic systems, especiallycomputers interconnected by networks such as the Internet, has causeddata represented electronically to become ubiquitous. Electronic datacan include a variety of file formats such as text, word processingdocuments, graphics data, still images, audio tracks and video data.

A wide range of information content, including “sensitive” informationitems can be represented electronically. Sensitive information caninclude any type of information or knowledge that might result in lossof an advantage or level of security if disclosed to others. Loss,misuse, modification or corruption of, or unauthorized access tosensitive information can adversely affect the privacy, reputation,finances or welfare of an individual, and trade secrets, reputation, andfinances of a business, depending on the level of sensitivity and natureof the information.

The intangible nature of electronic data, in conjunction with thepotential ease of undetected data copying, theft or corruption, can leadto a variety of data protection methods and devices can be employed toprotect sensitive data. Data protection methods and devices can beadapted and/or employed to provide a level of data protection suitableto the device containing the data such as a memory chip or hard diskdrive, or media such as a cable or free space, through which the data istransmitted. In certain applications, a combination of data protectionmethods or devices such as physically securing equipment containing dataand encrypting data using an encryption algorithm, can be employed toprovide a level of protection greater than the use of a single method ordevice.

SUMMARY

Embodiments can be directed towards a printed circuit (PC) cardapparatus configured to, in an absence of external power provided to aPeripheral Component Interconnect Express (PCIe) PC card, prevent anddetect unauthorized access to secure data stored on a memory devicemounted on the PCIe PC card. The PC card apparatus includes the PCIecard. The PCIe card includes a primary battery configured to supply,when external power is disconnected from the PCIe card, power to anelectronic security device mounted on the PCIe card. The PCIe card alsoincludes a PCIe edge card connector. The PC card apparatus also includesa PCIe edge connector protector enclosing electrically conductivefingers of the PCIe edge card connector. The PCIe edge connectorprotector includes a supplemental charge storage device that is hiddenfrom view and that is integrated into the PCIe edge connector protector.The PCIe edge connector protector also includes electrically conductivecontacts configured to transfer supplemental power from the supplementalcharge storage device to the electronic security device by completing,through contacting corresponding electrically conductive fingers of thePCIe edge connector, an electrical circuit between the supplementalcharge storage device and the security device.

Embodiments can also be directed towards a PC card apparatus configuredto, in an absence of external power provided to a PCIe PC card, preventand detect unauthorized access to secure data stored on a memory devicemounted on the PCIe PC card. The PC card apparatus includes the PCIecard. The PCIe card includes a primary battery configured to supply,when external power is disconnected from the PCIe card, power to anelectronic security device mounted on the PCIe card. The PCIe card alsoincludes a PCIe edge card connector. The PC card apparatus also includesa motherboard connector attached to a motherboard and enclosingelectrically conductive fingers of the PCIe edge card connector. Themotherboard connector includes a supplemental charge storage device thatis hidden from view and that is integrated into the motherboardconnector. The motherboard connector also includes electricallyconductive contacts configured to transfer supplemental power from thesupplemental charge storage device to the electronic security device bycompleting, through contacting corresponding electrically conductivefingers of the PCIe edge connector, an electrical circuit between thesupplemental charge storage device and the security device.

Embodiments can also be directed towards a PC card apparatus configuredto, in an absence of external power provided to a PCIe PC card, preventand detect unauthorized access to secure data stored on a memory devicemounted on the PCIe PC card. The PC card apparatus includes the PCIecard, inserted into a stacking connector. The PCIe card includes aprimary battery configured to supply, when external power isdisconnected from the PCIe card, power to an electronic security devicemounted on the PCIe card. The PCIe card also includes a PCIe edge cardconnector. The PC card apparatus also includes the stacking connector,inserted into a motherboard connector attached to a motherboard andenclosing electrically conductive fingers of the PCIe edge cardconnector. The stacking connector includes a supplemental charge storagedevice that is hidden from view and that is integrated into the stackingconnector. The stacking connector also includes electrically conductivecontacts configured to transfer supplemental power from the supplementalcharge storage device to the electronic security device by completing,through contacting corresponding electrically conductive fingers of thePCIe edge connector, an electrical circuit between the supplementalcharge storage device and the security device.

The above summary is not intended to describe each illustratedembodiment or every implementation of the present disclosure.

BRIEF DESCRIPTION OF THE DRAWINGS

The drawings included in the present application are incorporated into,and form part of the specification. They illustrate embodiments of thepresent disclosure and, along with the description, serve to explain theprinciples of the disclosure. The drawings are only illustrative ofcertain embodiments and do not limit the disclosure.

FIG. 1 includes a side view and a cross-sectional view of a printedcircuit (PC) card apparatus with a Peripheral Component InterconnectExpress (PCIe) edge connector protector, according to embodiments of thepresent disclosure.

FIG. 2 includes a side view and a cross-sectional view of a PC cardapparatus with a motherboard connector, according to embodimentsconsistent with the figures.

FIG. 3 includes a side view and a cross-sectional view of a PC cardapparatus with a stacking connector, according to embodiments consistentwith the figures.

While the invention is amenable to various modifications and alternativeforms, specifics thereof have been shown by way of example in thedrawings and will be described in detail. It should be understood,however, that the intention is not to limit the invention to theparticular embodiments described. On the contrary, the intention is tocover all modifications, equivalents, and alternatives falling withinthe spirit and scope of the invention.

In the drawings and the Detailed Description, like numbers generallyrefer to like components, parts, steps, and processes.

DETAILED DESCRIPTION

Certain embodiments of the present disclosure can be appreciated in thecontext of providing enhanced tamper detection and prevention forelectronic equipment such as hardware security modules (HSMs), which canbe used to provide data encryption services for servers. Such serverscan include, but are not limited to web servers, application servers,mail servers, and virtual servers. While not necessarily limitedthereto, embodiments discussed in this context can facilitate anunderstanding of various aspects of the disclosure. Certain embodimentscan also be directed towards other equipment and associatedapplications, such as providing enhanced tamper detection and preventionfor electronic equipment such as HSMs used in computing systems, whichcan be used in a wide variety of computational and data processingapplications. Such computing systems can include, but are not limitedto, supercomputers, high-performance computing (HPC) systems, and othertypes of special-purpose computers.

For ease of discussion, the term “supplemental charge storage device” isused herein, with reference to an electrical or electrochemical devicethat can be used to supply power to an electronic device. It can beunderstood that, in the context of the present disclosure, the terms“supplemental charge storage device” and “battery” can be usedinterchangeably, in reference to such a device, with the understandingthat a charge storage device can, in certain embodiments, also be usedto refer to a device such as a supercapacitor.

An HSM is a physical computing device that can be used to providecryptoprocessing, and which can safeguard and manage sensitive digitalencryption keys used for strong authentication. HSMs can be implementedin the form of a plug-in printed circuit (PC) card that attachesdirectly to a computer or network server, for example. A memory devicesuch as a memory chip or memory module mounted on the PC card can beused to store sensitive data such as digital encryption keys. HSMs canbe often used as components of a mission-critical systems such as apublic key infrastructure or applications involving sensitive data suchas government/military or financial data. The sensitive data containedwithin a memory device of an HSM can require a high degree of securityand protection.

HSMs can include devices and features that provide evidence, e.g.,visible or electrical indications of tampering, or electronic tamperlogging and alerting. HSMs can also include devices and features thatprovide tamper resistance and/or responsiveness, which can maketampering difficult without rendering the HSM inoperable. For example,an HSM can respond to detected tampering by deleting encryption keyscontained within an on-card memory device.

An HSM can contain one or more electronic security devices, e.g.,cryptoprocessor chips, that can be used in the prevention of tamperingand bus probing. Such an electronic security device, e.g., integratedcircuit (IC), can require a supply of continuous power in order toperform these functions. When an HSM is included within an electronicsystem that is active, such power can be supplied by the system itself.When the HSM is not included within a functioning electronic system, orthe electronic system is powered down, continuous power can be suppliedby the HSM, i.e., the electronic security device, by one or morebatteries integrated into the HSM.

A required time period for the electronic security device of an HSM tooperate without externally supplied power can be specified by variousspecifications or standards. For example, the Federal InformationProcessing Standard (FIPS) Publication 140-2 stipulates that theelectronic security device of an HSM must operate for a period of notless than five years when it is not receiving external power from anelectronic system or other source. The electronic security devices oncertain HSMs, however, can have an active operating time that is lessthat the stipulated five years. For example, with battery types andsizes that can be practically integrated into an HSM card, an activeoperating time can be limited to three years or less. Accordingly, therecan be a need to extend the operating time of certain HSMs in order tomeet the above-referenced five-year operating period.

Embodiments of the present disclosure are directed towards an apparatusthat can provide charge-storage capability that can be useful, inconjunction with charge-storage capability integrated within an HSM, toextend the operating time of the HSM to at least five years. Embodimentsof the present disclosure can be useful for including cost-effectiveextended-time tampering detection and prevention, for use with HSMs, byusing existing and proven design methodologies, printed circuit board(PCB), battery, and IC technologies. A PC card apparatus designedaccording to certain embodiments can be compatible with existing andproven electronic systems, and can be a useful and cost-effective way toprovide extended active protection intervals to HSMs. A PC cardapparatus designed according to embodiments of the present disclosurecan be installed and operated within an existing electronic system.

Certain embodiments relate to providing supplemental power to HSMs,e.g., PC cards, that require enduring, continuous power to enable anelectronic security device to operate for an extended time periodwithout a supply of external power. FIG. 1 includes a side view 100 anda cross-sectional view 150 of a PC card apparatus with a PeripheralComponent Interconnect Express (PCIe) edge connector protector 120,according to embodiments of the present disclosure. In embodiments, asupplemental charge storage device 110 can be particularly useful inproviding a supplemental amount of stored charge that can extend anoperating life of the PC card apparatus 100 to at least five years. Suchan extended operating life can be useful in preventing and detectingattempts at unauthorized access to sensitive data stored on memorydevice 104.

The PC card apparatus 100 includes PCIe PC card 106 which includeselectronic security device 102 and memory device 104 mounted on aface(s) of the card. PC card apparatus 100 also includes primary battery108, which is electrically connected to provide enduring, continuouspower to electronic security device 102. For ease of illustration anddiscussion, FIG. 1 depicts PC card 106 as a PCIe card, as many currentHSMs have a PCIe add-in card form-factor. This depiction, however,should not be construed as limiting. PC card 106 can be implemented in avariety of PC card form-factors and designed in accordance with avariety of design/interface standards. An HSM such as PC card 106designed as a PCIe card can have a limited size, with a relatively smallusable area available for a battery, e.g., primary battery 108, forproviding power to the card when it is not receiving power from a hostsystem.

A primary battery 108 can be electrically connected, as depicted, tosupply, when external power is disconnected from the PCIe PC card 106,power to the electronic security device 102. In some HSMs, primarybattery 108 is concealed from view, and in some HSMs, primary battery108 is not concealed. The schematic symbol of primary battery 108, asdepicted in FIGS. 1-3 , is used to represent a battery which, in someembodiments, can have a variety of physical locations on a face of PCIePC card 106, and in some embodiments, can be concealed within PCIe PCcard 106. Similarly, the lines interconnecting electrically conductivefingers 114, primary battery 108, and electronic security device 102 canbe used to represent conductive trace wires on or within PCIe PC card106.

Electronic security device 102 can be understood to be consistent withelectronic security devices discussed above and memory device 104 issimilarly consistent with memory devices discussed above. PCIe PC card106 also includes PCIe edge card connector 118 with electricallyconductive fingers 114 on an edge of the card 106. Certain electricallyconductive fingers 114 can be useful in providing power to electronicsecurity device 102 from an external power source, e.g., supplementalcharge storage device 110. In embodiments, PCIe edge card connector 118is inserted into PCIe edge connector protector 120, which enclosesenclosing electrically conductive fingers 114 of the PCIe edge cardconnector 118.

In embodiments, the supplemental charge storage device 110 can beconcealed from view, as depicted in view 100 and 150, and is integratedinto the PCIe edge connector protector 120. The body of PCIe edgeconnector protector 120 can be fabricated from a variety of types ofmolded plastics and other materials consistent with materials used inthe fabrication of PCIe and other types of edge-card connectors.Electrically conductive contacts 116 are configured to transfersupplemental power from the supplemental charge storage device 110 tothe electronic security device 102. Electrically conductive contacts 116can complete, through contacting corresponding electrically conductivefingers 114 of the PCIe edge card connector 118, an electrical circuitbetween the supplemental charge storage device 110 and the electronicsecurity device 102. Electrically conductive contacts 116 are generallyconsistent with contacts included in PCIe card edge connectors.

In the practice of the present disclosure, PCIe PC card 106 can bestored for extended periods with PCIe edge connector protector 120installed, as depicted in FIG. 1 . The use of PCIe edge connectorprotector 120 can allow the PCIe PC card 106 to be stored outside of a“host” system or other active operating environment for extendedperiods. The charge storage capacity of supplemental charge storagedevice 110 can be useful in augmenting the on-board primary battery 108and ensuring an at least five year operating lifespan, in the absence ofexternally supplied power, for the electronic security device 102. AnHSM designer can specify a particular size of PCIe edge connectorprotector 120 in order to accommodate particular size(s) of supplementalcharge storage device(s) 110 that may be needed to provide sufficientstored charge.

According to embodiments, supplemental charge storage device 110 can bea nickel metal hydride (NiMH) battery, a lithium-ion (Li-ion) battery,an alkaline battery, or a battery having another type of chemistry. Insome embodiments, supplemental charge storage device 110 can be asupercapacitor, or suitable configuration of various types of batteriesand/or supercapacitor(s). Batteries and/or supercapacitors can includecustom and/or off-the-shelf designs, and can have a range of physicaldimensions suitable for being integrated within a PCIe edge connectorprotector 120. In the practice of the present disclosure, a HSM designercan select one or more supplemental charge storage device(s) based onvarious physical and electrical characteristics. Such characteristicscan include but are not limited to: physical size, charge capacity,internal leakage, self-discharge characteristics, cost, and the like,and can be chosen in order to ensure an overall HSM operating intervalof at least five years.

By way of example, a electronic security device 102 can draw arelatively small amount of “standby” current, for example, 50 μA,nominally. If supplemental charge storage device 110 has a chargestorage capacity of at least 1,500 mAh, for example, then thesupplemental charge storage device 110 could be sufficient to supply theelectronic security device 102 with standby current for a period ofapproximately 28 months. This additional operating time can beparticularly useful in extending the operating time, without an externalpower source, of a PC card apparatus from three years to five years, inaccordance with specifications such as are contained in FederalInformation Processing Standard (FIPS) Publication 140-2.

In some embodiments, a single supplemental charge storage device 110 canbe used to supply long-term standby power to electronic security device102. In some embodiments, multiple supplemental charge storage devices,e.g., 110 and 112, can be used to supply electronic security device 102.An HSM designer can specify the interconnection of multiple supplementalcharge storage devices, in various configurations, in accordance withthe voltage and current requirements of particular electronic securitydevice(s) 102. One or more supplemental charge storage device can beconfigured to provide various supply voltages, for example, 3.3 V, 5 Vor 12 V, in accordance with supply voltage specifications of particularelectronic security device(s) 102.

FIG. 2 includes a side view 200 and a cross-sectional view 250 of a PCcard apparatus with a motherboard connector 222 attached to amotherboard 224, according to embodiments consistent with the figures.In embodiments, a supplemental charge storage device 110 can beparticularly useful in providing a supplemental amount of stored chargethat can extend an operating life of the PC card apparatus 100 to atleast five years. Such an extended operating life can be useful inpreventing and detecting attempts at unauthorized access to sensitivedata stored on memory device 104.

The PC card apparatus with motherboard connector, as depicted in views200 and 250, is generally consistent with PC card apparatus with PCIeedge connector protector, as depicted in views 100 and 150. Aspects suchas structure, function, electrical and physical characteristics,performance, and limitations of PCIe PC card 106, including electronicsecurity device 102, memory device 104, primary battery 108 and PCIeedge card connector 118, are generally consistent with those describedabove in reference to FIG. 1 .

In embodiments, the supplemental charge storage device 110 can beconcealed from view, as depicted in view 200 and 250, and is integratedinto the motherboard connector 222. The body of the motherboardconnector 222 can be fabricated from a variety of types of moldedplastics and other materials consistent with materials used in thefabrication of motherboard connectors and other types of edge-cardconnectors. Certain electrically conductive contacts 116 are configuredto transfer supplemental power from the supplemental charge storagedevice 110 to the electronic security device 102. Certain electricallyconductive contacts 116 can complete, through contacting correspondingelectrically conductive fingers 114 of the PCIe edge card connector 118,an electrical circuit between the supplemental charge storage device 110and the electronic security device 102. Electrically conductive contacts116 are generally consistent with contacts included in motherboardconnectors. Accordingly, certain electrically conductive contacts 116are configured to be used to conduct signals and power betweenmotherboard 224 and certain electrically conductive fingers 114.

In the practice of the present disclosure, PCIe PC card 106 can bestored for extended periods while inserted into motherboard connector222, as depicted in FIG. 2 . The use of motherboard connector 222 canallow the PCIe PC card 106 to be stored inside of a powered off “host”system, e.g., a computer or server, or other inactive operatingenvironment for extended periods. An HSM designer can specify aparticular size of motherboard connector 222 in order to accommodateparticular size(s) of supplemental charge storage device(s) 110 that canbe needed to provide sufficient stored charge. In some embodiments, asingle supplemental charge storage device 110 can be used to supplylong-term standby power to electronic security device 102. In someembodiments, multiple supplemental charge storage devices, e.g., 110 and112, can be used to supply electronic security device 102.

FIG. 3 includes a side view 300 and a cross-sectional view 350 of a PCcard apparatus with a stacking connector 326 attached to a motherboard224, according to embodiments consistent with the figures. Inembodiments, a supplemental charge storage device 110 can beparticularly useful in providing a supplemental amount of stored chargethat can extend an operating life of the PC card apparatus 100 to atleast five years. Such an extended operating life can be useful inpreventing and detecting attempts at unauthorized access to sensitivedata stored on memory device 104.

The PC card apparatus with stacking connector, as depicted in views 300and 350, is generally consistent with the PC card apparatuses depictedin views 100, 150, 200 and 250. Aspects such as structure, function,electrical and physical characteristics, performance and limitations ofPCIe PC card 106, including electronic security device 102, memorydevice 104, primary battery 108 and PCIe edge card connector 118, aregenerally consistent with those described above in reference to FIGS. 1and 2 .

In embodiments, the supplemental charge storage device 110 can beconcealed from view, as depicted in view 300 and 350, and is integratedinto the stacking connector 326. The body of the stacking connector 326can be fabricated from a variety of types of molded plastics and othermaterials consistent with materials used in the fabrication varioustypes of edge-card connectors. In embodiments, stacking connector 326can include a portion that can receive and enclose electricallyconductive fingers 114 of a PCIe edge card connector 118, and a portionthat can be inserted into another PCIe-compatible connector, forexample, motherboard connector 322.

Certain electrically conductive contacts 116 are configured to transfersupplemental power from the supplemental charge storage device 110 tothe electronic security device 102. Certain electrically conductivecontacts 116 can complete, through contacting corresponding electricallyconductive fingers 114 of the PCIe edge card connector 118, anelectrical circuit between the supplemental charge storage device 110and the electronic security device 102. Electrically conductive contacts116 are generally consistent with contacts included in stacking andinterposer connectors. Accordingly, certain electrically conductivecontacts 116 are configured to be used to conduct signals and powerbetween motherboard 224 and certain electrically conductive fingers 114.

In the practice of the present disclosure, PCIe PC card 106 can bestored for extended periods while inserted into stacking connector 326,which is in turn, inserted into motherboard connector 222. Motherboardconnector 222 is attached to motherboard 224, as depicted in FIG. 3 .The use of stacking connector 326 can allow the PCIe PC card 106 to bestored inside of a powered-off “host” system or other inactive operatingenvironment for extended periods. The charge storage capacity ofsupplemental charge storage device 110 can be useful in augmenting theon-board primary battery 108 and ensuring an at least five yearoperating lifespan, in the absence of externally supplied power, for theelectronic security device 102. An HSM designer can specify a particularsize of stacking connector 326 in order to accommodate particularsize(s) of supplemental charge storage device(s) 110 that may be neededto provide sufficient stored charge. A stacking connector 326 can, insome embodiments, provide a relatively large internal volume in which toincorporate one or more supplemental charge storage devices 110 and/or112. In some embodiments, a single supplemental charge storage device110 can be used to supply long-term standby power to electronic securitydevice 102. In some embodiments, multiple supplemental charge storagedevices, e.g., 110 and 112, can be used to supply electronic securitydevice 102.

The descriptions of the various embodiments of the present disclosurehave been presented for purposes of illustration, but are not intendedto be exhaustive or limited to the embodiments disclosed. Manymodifications and variations will be apparent to those of ordinary skillin the art without departing from the scope and spirit of the describedembodiments. The terminology used herein was chosen to explain theprinciples of the embodiments, the practical application or technicalimprovement over technologies found in the marketplace, or to enableothers of ordinary skill in the art to understand the embodimentsdisclosed herein.

What is claimed is:
 1. A printed circuit (PC) card apparatus comprising: a Peripheral Component Interconnect Express (PCIe) card, including: a primary battery configured to supply power to an electronic security device mounted on the PCIe card; and a PCIe edge card connector; and a PCIe edge connector protector including: a supplemental charge storage device integrated into the PCIe edge connector protector; and electrically conductive contacts configured to transfer supplemental power from the supplemental charge storage device to the electronic security device by completing, an electrical circuit between the supplemental charge storage device and the security device.
 2. The PC card apparatus of claim 1, wherein the supplemental charge storage device is selected from the group consisting of: a nickel metal hydride (NiMH) battery, a lithium-ion (Li-ion) battery, an alkaline battery, and a supercapacitor.
 3. The PC card apparatus of claim 1, wherein the supplemental charge storage device has a charge storage capacity of at least 1,500 mAh.
 4. The PC card apparatus of claim 1, wherein the charge storage capacity of the supplemental charge storage device, in conjunction with charge storage capacity of the primary battery, is sufficient to supply electrical power to enable operation, in the absence of externally supplied power, of the security device for a time interval of at least five years.
 5. A printed circuit (PC) card apparatus comprising: a Peripheral Component Interconnect Express (PCIe) card, including: a primary battery configured to supply power to an electronic security device mounted on the PCIe card; and a PCIe edge card connector; and a motherboard connector on a motherboard including: a supplemental charge storage device integrated into the motherboard connector; and electrically conductive contacts configured to transfer supplemental power from the supplemental charge storage device to the electronic security device by completing an electrical circuit between the supplemental charge storage device and the security device.
 6. The PC card apparatus of claim 5, wherein the supplemental charge storage device is selected from the group consisting of: a nickel metal hydride (NiMH) battery, a lithium-ion (Li-ion) battery, an alkaline battery, and a supercapacitor.
 7. The PC card apparatus of claim 5, wherein the supplemental charge storage device has a charge storage capacity of at least 1,500 mAh.
 8. The PC card apparatus of claim 5, wherein the charge storage capacity of the supplemental charge storage device, in conjunction with charge storage capacity of the primary battery, is sufficient to supply electrical power to enable operation, in the absence of externally supplied power, of the security device for a time interval of at least five years.
 9. A printed circuit (PC) card apparatus comprising: a Peripheral Component Interconnect Express (PCIe) card, inserted into a stacking connector, the PCIe card including: a primary battery configured to supply power to an electronic security device mounted on the PCIe card; and a PCIe edge card connector; and the stacking connector, inserted into a motherboard connector, the stacking connector including: a supplemental charge storage device integrated into the stacking connector; and electrically conductive contacts configured to transfer supplemental power from the supplemental charge storage device to the electronic security device by completing an electrical circuit between the supplemental charge storage device and the security device.
 10. The PC card apparatus of claim 9, wherein the supplemental charge storage device is selected from the group consisting of: a nickel metal hydride (NiMH) battery, a lithium-ion (Li-ion) battery, an alkaline battery, and a supercapacitor.
 11. The PC card apparatus of claim 9, wherein the supplemental charge storage device has a charge storage capacity of at least 1,500 mAh.
 12. The PC card apparatus of claim 9, wherein the charge storage capacity of the supplemental charge storage device, in conjunction with charge storage capacity of the primary battery, is sufficient to supply electrical power to enable operation, in the absence of externally supplied power, of the security device for a time interval of at least five years. 